You found a list of SHA256 hashes in an intelligence report and search for them using the Hash Execution Search. What can be determined from the results?
A.
Identifies a detailed list of all process executions for the specified hashes
B.
Identifies hosts that loaded or executed the specified hashes
C.
Identifies users associated with the specified hashes
D.
Identifies detections related to the specified hashes
Answer is A, the hash is refer to the process and it will usually use for IOC management for the process.
compare A and B, A is asking "process" and B us asking "hosts loaded it", but A is better answer because "process execution" is before "host" and one host can be load the same process more than once.
Answer is A, the hash is refer to the process and it will usually use for IOC management for the process.
compare A and B, A is asking "process" and B us asking "hosts loaded it", but A is better answer because "process execution" is before "host" and one host can be load the same process more than once.
This section is not available anymore. Please use the main Exam Page.CCFR-201 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
3ffa7f1
1 year, 1 month agoalanalanalan
1 year, 1 month agoalanalanalan
1 year, 1 month agoDkdnfnfmdkdkd
1 year, 4 months agomlobo
1 year, 5 months agokangaru
1 year, 5 months agosbag0024
1 year, 5 months agoVasiOnCacao
1 year, 6 months agowildbandana
1 year, 7 months agolightmagenta
1 year, 7 months ago